Forum — PoC Archivehttps://poc.intelseclab.com/tags/forum/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000PolarLearn Forum Vote Count Manipulation (CVE-2026-25126)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-25126-polarlearn-vote-manipulation/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-25126-polarlearn-vote-manipulation/Medium severity — web · CVE-2026-25126. Status: PoC. Affects: PolarLearn forum platform. Tags: business-logic, vote-manipulation, input-validation, api-abuse, forum, nodejs, ghost-downvote.webMediumbusiness-logicvote-manipulationinput-validationapi-abuseforumnodejsghost-downvoteDiscuz! X5.0 Race Condition + CAPTCHA-Solving Pre-Auth to RCE Chain (CVE-2026-49952)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-49952-discuz-race-condition-captcha-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-49952-discuz-race-condition-captcha-rce/Critical severity — web · CVE-2026-49952 (chain also referenced as KIS-2026-09, KIS-2026-10, KIS-2026-11). Status: PoC. Affects: Discuz! X5.0 (PHP-based forum/CMS software). Tags: discuz, php, forum, race-condition, captcha-bypass, ocr, account-takeover, lfi, webshell, rce, pre-auth.webCriticaldiscuzphpforumrace-conditioncaptcha-bypassocraccount-takeoverlfiwebshellrcepre-auth